CVE-2024-57249
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-57249 is a newly discovered vulnerability in the Preview Function of Gleamtech FileVista 9.2.0.0. This issue involves incorrect access control, enabling remote attackers to bypass authentication processes. By removing specific HTTP headers, including the Cookie header, in their requests, attackers can exploit the vulnerability and gain unauthorized access to sensitive image files without proper login credentials. This weakness in access control mechanisms poses a significant security risk and should be addressed promptly by updating to the latest version of FileVista.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.